It's a global setting. You can work around this in the active response script.
On Tue, Feb 28, 2012 at 9:03 AM, Jakov Sosic <[email protected]> wrote: > Hi > > I'm using server-client setup, with activeresponse. But I would like to > whitelist some IP's only on some agents. Is that possible? > > I've found a bug from 5 years ago: > > http://marc.info/?l=ossec-dev&m=119742698220234 > > > Is this possible to do, I'm using v2.6, and I'm pushing agent configurations > from server through /var/ossec/etc/shared/agent.conf. > > ty
